General
- Target 2026-08-27_f99716d2ceefb29bc24f185be7b64a12_cobalt-strike_icedid_luca-stealer_njrat
- Size 617KB
- Sample260828-a6x18abd97
- SHA256 231edacc86036a00c79f535072be7cd7d1356fb2992ba9ba39d32f1ecda97ba9
- MD5 f99716d2ceefb29bc24f185be7b64a12
- SHA1 63acdad214f833346ced92ac711601bc86e5eed5
- SHA512 3df65b7c0fe2d0e3227e7b2b7716c5a4e8cd160fc305ac44ec430ea55a7f5a4ab15c7c0d7f8b3b212c6bf04124ea67c86d499aeee5c91049e648b047a7c718c5
- SSDEEP 12288:/NlpJUXCmt9zp+Yh0KcptxFgICTPsiqYGMAzsS0yb3cK:/npJy3h0KqAPsFHMEsS0dK
- TLSH T18DD40157B269F9F0F06651B2C5620E01F375B9311B29FB0F03E242B94E6B4899F1EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_f99716d2ceefb29bc24f185be7b64a12_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_f99716d2ceefb29bc24f185be7b64a12_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_f99716d2ceefb29bc24f185be7b64a12_cobalt-strike_icedid_luca-stealer_njrat
- Size 617KB
- SHA256 231edacc86036a00c79f535072be7cd7d1356fb2992ba9ba39d32f1ecda97ba9
- MD5 f99716d2ceefb29bc24f185be7b64a12
- SHA1 63acdad214f833346ced92ac711601bc86e5eed5
- SHA512 3df65b7c0fe2d0e3227e7b2b7716c5a4e8cd160fc305ac44ec430ea55a7f5a4ab15c7c0d7f8b3b212c6bf04124ea67c86d499aeee5c91049e648b047a7c718c5
- SSDEEP 12288:/NlpJUXCmt9zp+Yh0KcptxFgICTPsiqYGMAzsS0yb3cK:/npJy3h0KqAPsFHMEsS0dK
- TLSH T18DD40157B269F9F0F06651B2C5620E01F375B9311B29FB0F03E242B94E6B4899F1EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL